CVE-2021-42128

An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service...

Ivanti Avalanche EnterpriseServer Service setUser Authentication Bypass (CVE-2021-42128)

A authentication bypass vulnerability exists in the Ivanti Avalanche Enterprise Server. The vulnerability is due to lack of authentication for certain functionality...

CVE-2021-42128

Summary: CVE-2021-42128 affects Ivanti Avalanche prior to 6.3.3, via the Enterprise Server Service. The vulnerability stems from an exposed dangerous function in the Enterprise Server Service that permits an authentication bypass, enabling privilege escalation. Multiple connected sources confirm:...